Privacy Policy

Welcome to the rpp77 Privacy Policy. rpp77 ("we", "us", "our") operates the online betting and casino platform accessible at rpp77.net (the "Platform"). We are committed to safeguarding the privacy and security of every individual who accesses or uses the Platform, whether as a registered Member or as a visitor.

This Privacy Policy describes how rpp77 collects, uses, stores, shares, and protects personal information in connection with the Platform and all related services. It also explains the rights available to you regarding your personal data and how to exercise those rights.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. By creating an account, making a deposit, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the data practices described herein.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, date of birth, email address, mobile number, Indonesian national identity number (KTP number), payment account details, and IP address.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure, or destruction.
• "Controller" means rpp77, the entity that determines the purposes and means of processing your Personal Data.
• "Processor" means a third party that processes Personal Data on behalf of rpp77 under a data processing agreement.
• "Member" means any natural person who has completed account registration on the Platform.
• "Cookies" means small text files placed on your device by the Platform to collect standard internet log information and visitor behavior data.
• "KYC" means Know Your Customer — the identity and age verification procedures rpp77 applies to comply with anti-money laundering and responsible gaming obligations.
• "IDR" / "Rp" refers to Indonesian Rupiah, the sole transactional currency on the Platform.

rpp77 collects the following categories of Personal Data, limited to what is necessary and proportionate to the purposes described in Clause 5:

rpp77 collects Personal Data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated Technologies: When you browse the Platform, our servers automatically record Technical Data and Usage Data, including IP address, device identifiers, browser specifications, and session behavior, through server logs and cookies (see Clause 8).
• Payment Processors: Our certified payment gateway partners confirm transaction status and may share limited financial identifiers — such as masked bank account numbers — to enable our reconciliation and fraud prevention processes. Full banking credentials are never transmitted to rpp77.
• Third-Party Analytics Providers: rpp77 uses analytics tools to understand aggregate Platform usage patterns. These tools may collect anonymized or pseudonymized usage data subject to the providers' own privacy policies.
• KYC Verification Partners: To fulfill our age and identity verification obligations, rpp77 may use third-party KYC service providers who process identity documents on our behalf under strict data processing agreements.
• Publicly Available Sources: In limited circumstances related to fraud prevention or compliance, rpp77 may verify information against publicly available records or commercially licensed databases.

rpp77 uses your Personal Data for the following purposes, each grounded in a legitimate legal basis as described in Clause 6:

• Account Administration: Creating and maintaining your Member account, verifying your identity, processing deposits and withdrawals via BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, and other supported payment channels.
• Service Delivery: Enabling you to place bets on the sportsbook (including BRI Liga 1, EPL, and Champions League markets), play slot games from studios such as Pragmatic Play and Spribe, and access live casino games powered by Evolution Gaming.
• KYC & Compliance: Verifying that you are at least 21 years of age, confirming your identity to satisfy anti-money laundering (AML) obligations, and screening against sanctions and politically exposed persons (PEP) lists.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, duplicate accounts, bonus abuse, money laundering, and other fraudulent activity on the Platform.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling indicators, enforcing self-exclusion requests, applying deposit limits, and complying with responsible gaming obligations. See our Responsible Gaming page for full details.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of your communications with our support team.
• Marketing Communications: Sending you promotional offers, bonus notifications, and product updates by email or SMS — only if you have opted in to receive such communications. You may withdraw consent at any time.
• Platform Improvement: Analyzing aggregated usage data to understand how Members interact with the Platform and to improve features, performance, and content.
• Legal Obligations: Complying with applicable laws, responding to lawful requests from regulatory authorities, and enforcing our Terms & Conditions.

rpp77 processes your Personal Data on the following legal bases:

• Contractual Necessity: Processing that is required to fulfill our contractual obligations to you as a Member — including account creation, payment processing, bet settlement, and customer support — is based on the performance of the contract between you and rpp77.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC and AML obligations, is performed on the basis of legal obligation.
• Legitimate Interests: Processing for fraud prevention, Platform security, service improvement, and internal analytics is based on rpp77's legitimate interests, which do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, personalized promotions, and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

rpp77 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share your Personal Data in the following circumstances only:

• Payment Processors: We share the minimum necessary financial identifiers with our certified payment gateway partners (handling BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, BSI, Bank Permata, OVO, DANA, GoPay, ShopeePay, and LinkAja transactions) to process deposits and withdrawals on your behalf. These partners are contractually bound to use your data only for payment processing purposes.
• KYC & AML Verification Partners: Identity documents and identity data may be shared with certified KYC verification service providers under strict data processing agreements. These providers act as Processors under our instruction.
• Game Content Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft may receive pseudonymized player identifiers to enable game session management. No directly identifiable Personal Data is shared with game studios without your explicit consent.
• Analytics Providers: Aggregated, anonymized or pseudonymized usage data may be shared with analytics service providers to help us understand Platform performance and improve the user experience.
• Legal & Regulatory Authorities: rpp77 may disclose Personal Data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or in response to a legitimate legal request, and to the extent strictly necessary to comply with that obligation.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of rpp77's business, your Personal Data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer via your registered email address.

rpp77 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and analyze usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that help detect fraudulent activity. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method display, and game layout choices to provide a more personalized experience across sessions.
• Analytics Cookies: Collect anonymized data about how Members navigate the Platform — which pages are visited most frequently, where users exit the site, and how features are used. This data is used exclusively for internal Platform improvement.
• Marketing Cookies: Used only if you have consented to receive personalized promotional content. These cookies help us tailor bonus offers and promotional banners to your demonstrated interests on the Platform.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core Platform features, including logging in and placing bets. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

rpp77 implements a comprehensive set of technical and organizational security measures to protect your Personal Data against unauthorized access, accidental loss, disclosure, alteration, or destruction:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and rpp77's servers is encrypted using Transport Layer Security (TLS) with 256-bit AES cipher suites. This applies to account login, payment transactions, and all API communications.
• Password Hashing: Account passwords are never stored in plaintext. They are hashed using an industry-standard one-way cryptographic hashing algorithm with per-user salting, ensuring that even a database breach would not expose readable passwords.
• Access Controls: Access to personal data within rpp77's infrastructure is governed by strict role-based access control (RBAC). Staff access is limited to the minimum necessary for their role, and all access events are logged and audited.
• Network Security: rpp77's Platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and regular penetration testing performed by independent security professionals.
• No Storage of Card Credentials: rpp77 does not store credit card numbers, bank account PINs, or e-wallet passwords on its systems. Payment credentials are processed exclusively by our certified payment gateway partners.
• Incident Response: rpp77 maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your rights and freedoms, we will notify affected Members via their registered email address within a commercially reasonable timeframe.

rpp77 retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active membership and for a period of 5 years following the closure of your account, to comply with anti-money laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC Documents: Identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of submission or account closure, whichever is later, in line with AML compliance requirements.
• Transaction Records: Deposit, withdrawal, and bet history records are retained for 5 years from the date of each transaction, for audit, dispute resolution, and regulatory compliance purposes.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the interaction, to support quality assurance and dispute resolution.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preferences are retained for as long as the consent is active and for 1 year following any withdrawal of consent, to demonstrate compliance.
• Analytics Data: Aggregated, anonymized analytics data may be retained indefinitely as it does not constitute Personal Data.

Upon expiry of the applicable retention period, Personal Data is securely deleted or irreversibly anonymized. Requests for early deletion are handled in accordance with Clause 11 (Your Rights) and subject to any overriding legal retention obligations.

Subject to applicable law and the limitations described below, you have the following rights regarding your Personal Data held by rpp77:

• Right of Access: You may request a copy of the Personal Data rpp77 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data. For simple updates such as email address or mobile number changes, you may also update your details directly in your Account profile after rpp77 login.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where processing is unlawful. This right is subject to legal retention obligations — for example, rpp77 may be required to retain KYC and transaction records for 5 years under AML law regardless of a deletion request.
• Right to Restriction of Processing: You may request that rpp77 restrict processing of your Personal Data in certain circumstances, such as while the accuracy of data is being contested or a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that rpp77 provide your Personal Data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your Personal Data based on legitimate interests (including profiling for marketing purposes). rpp77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Lodge a Complaint: If you believe rpp77 has not handled your Personal Data in accordance with this Privacy Policy, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of these rights, please contact our support team via live chat on the Platform or by email at [email protected] (plain text — not a clickable link). We will respond to all verified requests within 30 days. We may require proof of identity before processing any data rights request.

The rpp77 Platform is strictly intended for adults aged 21 years and older. rpp77 does not knowingly collect Personal Data from any person under the age of 21. If you are under 21, you must not use or attempt to use the Platform.

If rpp77 becomes aware that it has inadvertently collected Personal Data from a person under 21, it will immediately suspend the associated account, delete all Personal Data collected from that individual, and forfeit any account balance in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has registered on the rpp77 Platform, please contact our support team immediately via live chat or at [email protected] (plain text — not clickable). We will investigate promptly and take all necessary remedial action.

rpp77's primary Platform infrastructure is operated with a focus on the Indonesian market (WIB, UTC+7). However, some of our third-party service providers — including KYC verification partners, analytics providers, and game content studios — may process data on servers located outside Indonesia.

When Personal Data is transferred internationally, rpp77 ensures that appropriate safeguards are in place to maintain the standard of protection required under this Policy. These safeguards include:

• Contractual data processing agreements that bind third-party processors to privacy and security standards equivalent to or exceeding those described in this Policy.
• Transfer only to processors operating in jurisdictions that provide an adequate level of data protection, or where adequate contractual protections substitute for such legal frameworks.
• Limiting transfers to the minimum personal data necessary to enable the specific service provided by each third party.

The rpp77 Platform does not include outbound links to third-party websites. All navigation remains within the rpp77 domain. However, game content delivered by third-party studios such as Pragmatic Play, Evolution Gaming, Spribe, and Pocket Games Soft is technically embedded within the Platform and may involve those studios' own data collection practices in relation to game session data.

rpp77 is not responsible for the privacy practices of game content studios or any other third-party service providers beyond the data processing agreements described in Clause 7. We encourage you to review the privacy policies of any third-party services you interact with independently of the rpp77 Platform.

rpp77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered Members via the email address associated with their account at least 7 days before the changes take effect.

Non-material changes — such as clarifications, formatting updates, or corrections to typographical errors that do not affect the substance of the Policy — may be published without prior notice. The "Last updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rpp77 handles your Personal Data, please contact our dedicated privacy team through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the rpp77 Platform after logging in at rpp77 Login
• Response Time: Live chat within 2 minutes; email within 24 hours (WIB, UTC+7)
• Support Languages: English and Bahasa Indonesia — our team includes native Indonesian-speaking agents available around the clock

For data rights requests (access, rectification, erasure, portability), please use the subject line "Data Rights Request – [Your Registered Email]" when emailing us to ensure your request is directed to the appropriate team and handled within the 30-day response window.